Overview

overview

7

Static

static

7

a314daf6f6...cs.exe

windows7-x64

7

a314daf6f6...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe

  • Size

    32KB

  • Sample

    240524-eprkbscf44

  • MD5

    a314daf6f6207571059bebd04029b190

  • SHA1

    704d2a2c5af374a03f54b28b5c7d8478cfebe526

  • SHA256

    582f0882984a2f8f97eccee8516ad8b5e081dc62e3dbf2f73d88c864de2f164e

  • SHA512

    61f717c1e738a01a6d1ad3e973c487380a2fec4328769e06be8a37cada3a03e4ea3bf7d7c9b5257c5319c3bd23708e124eaaa4f747121bb31bbf08b0d808f546

  • SSDEEP

    384:DbbkrRWSjubh9bJHupySeNvt0WzMudtoUKbQm:Dbbkrtju1uOdt48KUKx

Score
7/10
upx

Malware Config

Targets

    • Target

      a314daf6f6207571059bebd04029b190_NeikiAnalytics.exe

    • Size

      32KB

    • MD5

      a314daf6f6207571059bebd04029b190

    • SHA1

      704d2a2c5af374a03f54b28b5c7d8478cfebe526

    • SHA256

      582f0882984a2f8f97eccee8516ad8b5e081dc62e3dbf2f73d88c864de2f164e

    • SHA512

      61f717c1e738a01a6d1ad3e973c487380a2fec4328769e06be8a37cada3a03e4ea3bf7d7c9b5257c5319c3bd23708e124eaaa4f747121bb31bbf08b0d808f546

    • SSDEEP

      384:DbbkrRWSjubh9bJHupySeNvt0WzMudtoUKbQm:Dbbkrtju1uOdt48KUKx

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks